$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer File: F576D7187FE092471757158DEF85D92023BB827A.cer (raw, json) Hash identifier: RIhnJb8XUKSsXkJbBXTR6xODaw5VerwrgrJ4OQEeTQ8= Subject key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5D529CC32E329A923BAB372FB6DE8BD8C2877D4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:12:04 +0000 Certificate not after: Sun 02 May 2027 02:17:04 +0000 Subordinate resources: IP: 160.25.126.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:52:9c:c3:2e:32:9a:92:3b:ab:37:2f:b6:de:8b:d8:c2:87:7d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:12:04 2026 GMT Not After : May 2 02:17:04 2027 GMT Subject: CN=F576D7187FE092471757158DEF85D92023BB827A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:d9:62:02:7b:8d:60:62:0c:ad:45:2d:ce: ed:c9:7e:ff:1c:a4:cc:8a:f4:00:4a:3c:f9:1a:21: d0:a7:63:de:03:0e:90:35:75:16:7b:92:79:4f:28: 5c:93:47:e5:29:f0:7c:e3:ab:98:63:89:1a:ad:e1: 48:b9:e3:fc:cb:3d:95:47:a1:6d:1e:f9:5c:c3:70: cd:ba:b4:e8:13:dd:39:5e:ff:e6:cf:ac:ac:e0:59: 9e:82:b5:af:3e:1b:21:d0:b8:db:63:de:c5:ee:89: 13:d9:c8:55:f7:a6:be:ce:5e:4b:52:79:00:11:4f: 24:6f:5d:ab:93:cd:9e:70:0d:00:70:db:a7:36:50: ca:ea:1d:e9:bc:95:28:90:0d:c6:df:ea:3b:f2:26: 1e:f5:bf:02:e2:2f:10:2f:03:b8:da:73:15:03:10: 88:7e:fe:b3:f0:2b:b9:07:22:25:cd:fc:c3:e1:d1: 32:1e:db:63:85:0d:be:b4:09:e2:63:6e:ca:b9:bb: 3d:c7:43:52:53:08:dd:00:39:e0:76:81:26:cf:54: 25:1d:2f:b0:57:a2:66:a0:ea:50:d2:54:65:a9:bd: ba:b7:d5:00:c1:72:f6:ef:7f:24:bb:08:f0:fb:a2: b0:17:4e:50:9f:97:cd:f0:ef:3d:b0:dd:a7:41:d9: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.126.0/23 Signature Algorithm: sha256WithRSAEncryption 93:3c:fd:7b:87:15:10:02:b9:c5:a7:fb:c6:41:f0:18:17:8f: 31:69:48:c5:d9:25:42:9d:c8:bb:50:fb:83:89:28:da:44:b2: cf:c0:25:eb:d6:26:82:eb:50:71:14:46:65:48:0e:9c:52:ee: ba:cc:04:b5:69:3f:41:d9:56:54:1d:83:80:60:08:ef:77:71: f7:cb:21:ec:ed:cf:f0:1b:04:02:cd:06:d4:3a:6d:c9:d9:8a: 5e:13:a8:70:49:ce:04:f2:ea:ec:74:c4:a8:dc:d5:18:19:68: 9e:b9:20:d7:0d:50:d7:a3:3b:8d:a7:9c:a7:98:b2:b8:c5:1e: 78:b7:6a:f4:23:e5:7f:6b:8a:e9:78:65:ad:36:f7:80:de:4b: 2a:d9:82:de:32:64:a0:a5:16:81:4d:26:41:69:97:05:1b:26: 25:79:84:49:45:04:85:1a:c0:33:d2:30:88:fe:10:76:ad:c6: 28:a1:24:52:89:cd:fb:e4:5f:7c:7f:1d:82:d2:23:8e:d7:ae: 4e:18:a5:84:c2:1a:1c:95:0e:bc:cf:45:4e:10:a1:7a:0a:f6: a7:7a:8e:e0:a5:83:f1:dc:78:ef:40:9d:77:72:2d:28:67:b0: fd:40:39:b7:e7:dd:56:61:e2:94:3a:0e:9d:8f:74:b2:6c:36: f2:d1:a0:b5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXVKcwy4ympI7qzcvtt6L2MKHfU8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMTIwNFoX DTI3MDUwMjAyMTcwNFowMzExMC8GA1UEAxMoRjU3NkQ3MTg3RkUwOTI0NzE3NTcx NThERUY4NUQ5MjAyM0JCODI3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHb2WICe41gYgytRS3O7cl+/xykzIr0AEo8+Roh0Kdj3gMOkDV1FnuSeU8o XJNH5SnwfOOrmGOJGq3hSLnj/Ms9lUehbR75XMNwzbq06BPdOV7/5s+srOBZnoK1 rz4bIdC422Pexe6JE9nIVfemvs5eS1J5ABFPJG9dq5PNnnANAHDbpzZQyuod6byV KJANxt/qO/ImHvW/AuIvEC8DuNpzFQMQiH7+s/AruQciJc38w+HRMh7bY4UNvrQJ 4mNuyrm7PcdDUlMI3QA54HaBJs9UJR0vsFeiZqDqUNJUZam9urfVAMFy9u9/JLsI 8PuisBdOUJ+XzfDvPbDdp0HZbLcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPV21xh/4JJHF1cVje+F2SAju4J6MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UyMDZkZWZhLWZhNDMtNGY5My05M2NlLTM5ZmRmZjgxYzE5YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMjA2ZGVm YS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC9GNTc2RDcxODdGRTA5MjQ3 MTc1NzE1OERFRjg1RDkyMDIzQkI4MjdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBl+MA0GCSqGSIb3DQEBCwUAA4IBAQCTPP17hxUQArnFp/vGQfAYF48xaUjF 2SVCnci7UPuDiSjaRLLPwCXr1iaC61BxFEZlSA6cUu66zAS1aT9B2VZUHYOAYAjv d3H3yyHs7c/wGwQCzQbUOm3J2YpeE6hwSc4E8ursdMSo3NUYGWieuSDXDVDXozuN p5ynmLK4xR54t2r0I+V/a4rpeGWtNveA3ksq2YLeMmSgpRaBTSZBaZcFGyYleYRJ RQSFGsAz0jCI/hB2rcYooSRSic375F98fx2C0iOO165OGKWEwhoclQ68z0VOEKF6 Cvaneo7gpYPx3HjvQJ13ci0oZ7D9QDm3591WYeKUOg6dj3SybDby0aC1 -----END CERTIFICATE-----Generated at Tue May 12 22:02:58 2026 by rpki-client